skill-article-outline
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external websites retrieved via the
WebSearchandWebFetchtools during the search analysis phase inSKILL.md. - Ingestion points: External content is ingested via
WebSearchresults (Step 2.1) and detailedWebFetchstructures (Step 2.3). - Boundary markers: The instructions lack explicit boundary markers or delimiters to instruct the agent to ignore potential instructions embedded within the fetched web content.
- Capability inventory: The skill has the capability to write to the local file system in the
outputs/directory (Step 5). - Sanitization: There is no mention of sanitizing or filtering the external content before it is used to generate the final outline.
Audit Metadata